Supplier Disclosure Statement

This information notice has been prepared by ECE MERMER TURİZM SAN. VE TİC. LTD. ŞTİ. (“Company”), acting as the data controller, within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to Be Followed in Fulfilment of the Obligation to Inform.

The Company aims to process the personal data of its suppliers in compliance with the Law No. 6698 on the Protection of Personal Data (“KVK Law”) and other applicable legislation.

With this Information Notice, it is adopted that the activities carried out by the Company are maintained and developed in accordance with the principles set out in the KVK Law.

The personal data of suppliers collected and used by our Company mainly consist of the data listed above.

Your personal data mentioned above are processed in all circumstances in compliance with the law and the principles of good faith, by preserving the accuracy and up-to-dateness of the personal data you have shared, for specific, explicit, and legitimate purposes, and in a manner that is relevant, limited, and proportionate to the purpose for which they are processed.

Purpose of Processing Personal Data:

Your personal data are processed by our Company for limited purposes such as the procurement and monitoring of supplier services, quality control and evaluation related to the performance of services/contracts, execution of finance and accounting operations, carrying out payment transactions, and ensuring communication.

Recipients and Purposes of Transfer of Processed Personal Data:

Your personal data collected during this process;

may be transferred, within the framework permitted by the Labor Law, Turkish Commercial Code, Tax Procedure Law, Law No. 6698 on the Protection of Personal Data, and other relevant legislation, to authorized institutions and organizations such as the Personal Data Protection Authority, Ministry of Treasury and Finance, Ministry of Customs and Trade, Ministry of Labor and Social Security, Information and Communication Technologies Authority, and similar public legal entities; and to domestic and foreign partner organizations with which ECE MERMER TURİZM SAN. VE TİC. LTD. ŞTİ. cooperates or receives services under contract, and which are jointly and severally responsible with us for taking workplace security measures such as the storage of your personal data, prevention of unauthorized access, and prevention of unlawful processing.

Method and Legal Basis of Collecting Personal Data:

Your personal data are collected in physical and electronic environments for the purposes stated above, based on the legal grounds specified in Articles 5 and 6 of the KVK Law, namely that the processing is directly related to the establishment or performance of a contract, that processing personal data of the parties to the contract is necessary, and that it is mandatory for the data controller to fulfil its legal obligations.

Your personal data will be retained for the reasonable period stipulated in the relevant legislation or until the purpose of processing ceases to exist, and in any case, for the statutory limitation periods.

4. Rights of the Supplier

Pursuant to Article 11 of the KVK Law, you may apply to our Company to submit requests regarding your personal data on the following matters:

1. To learn whether personal data are processed,
2. To request information if personal data have been processed,

III. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

1. To know the third parties to whom personal data are transferred domestically or abroad,
2. To request correction of personal data if they are processed incompletely or inaccurately and to request notification of such corrections to third parties to whom the personal data have been transferred,
3. To request deletion or destruction of personal data if the reasons requiring their processing cease to exist, even though they have been processed in accordance with Law No. 6698 and other relevant legislation, and to request notification of such actions to third parties to whom the personal data have been transferred,

VII. To object to the occurrence of a result against the data subject due to the analysis of processed personal data exclusively through automated systems,

VIII. To request compensation for damages in case of loss arising from unlawful processing of personal data

Method of Submitting Requests:

Your requests within the scope of Article 11 of the Law titled “rights of the relevant person” may be submitted in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” by filling in and signing the application form available on the Company’s website and submitting it in writing by personally verifying your identity or through a notary public to the address GÜRLEYİK MAH. 601 SOKAK NO:3/1 HONAZ / DENİZLİ, or by sending it via the verified electronic mail address or Registered Electronic Mail (KEP) address.

Depending on the nature of your request, applications will be concluded free of charge as soon as possible and at the latest within 30 (thirty) days. However, if the process requires an additional cost, a fee may be charged according to the tariff to be determined by the Personal Data Protection Board. If the response exceeds 10 (ten) pages, a processing fee of TRY 1.00 (one Turkish Lira) per page will be charged. If the response is requested to be provided in a recording medium such as a CD or flash drive, a fee corresponding to the cost of the requested recording medium may be charged.

Amendments:

Amendments may be made to this information notice depending on changes in legislation. In the event of any changes, necessary announcements will be made on our website, and it is recommended that you regularly visit our website in order to be informed of such changes.